This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json)
Hash identifier: G5BvpYFSjZEzT8Aiw3cEbUEf7lkH/FrVMo/ahLSgWo4=
Subject key identifier: 12:5B:20:A0:DD:D2:21:E2:29:17:8C:5E:3C:92:F8:6B:CA:F1:BD:E2
Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67
Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
Certificate serial: 06C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
Manifest number: 06BD
Signing time: Sat 24 Jan 2026 21:33:07 +0000
Manifest this update: Sat 24 Jan 2026 21:33:06 +0000
Manifest next update: Sat 31 Jan 2026 21:33:06 +0000
Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: JAgUsL5SrRWRK5P82eRNs6T9aoCEF2LoQ9IDVyDMSZs=)
2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: d2oIVGi69pBa33ybuBMk+1p+0WxxE+fB43cE7gCYVHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl
rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167
Validity
Not Before: Jan 24 21:33:06 2026 GMT
Not After : Jan 31 21:33:06 2026 GMT
Subject: CN=69753a92-9adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:66:a7:f6:b1:b6:f5:ad:ce:bf:8b:af:e7:
4b:17:d8:7a:02:52:0a:9f:74:5e:96:65:15:8b:34:
52:61:b2:19:07:3a:dd:80:e4:30:d1:46:45:c7:a4:
db:77:f1:ab:d7:ca:0c:e5:a4:f0:1b:79:4c:58:4e:
6e:e0:20:98:45:20:43:88:b9:c8:72:94:01:b7:2d:
80:20:80:54:3c:5b:1e:03:fc:c2:ca:4a:6a:5a:8b:
eb:e9:cf:e4:03:42:66:06:cd:77:99:e9:79:3a:3d:
82:06:d2:75:8e:54:95:a9:4e:ad:95:42:3e:97:e0:
e3:e9:79:e8:08:ad:e2:1c:86:a5:50:21:a3:24:5f:
bc:76:b8:d3:97:4a:24:d9:c3:20:83:7d:05:b4:21:
26:65:e9:99:38:77:ec:5d:2d:0f:49:f7:33:96:6b:
87:50:75:82:7e:9a:54:07:23:9a:28:ac:97:47:e5:
33:27:64:20:5c:b7:7b:37:aa:ad:9c:b2:4e:18:cf:
cd:a7:73:5c:d4:4e:97:43:da:44:2c:7a:74:72:75:
6b:7e:7f:22:7c:b5:c5:52:16:43:d4:9c:10:6c:80:
fb:b1:55:e1:2e:a6:a2:27:1e:5a:73:01:e7:bb:54:
43:f1:cd:0e:6f:b1:94:49:81:c4:a1:85:bb:93:17:
5d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:20:A0:DD:D2:21:E2:29:17:8C:5E:3C:92:F8:6B:CA:F1:BD:E2
X509v3 Authority Key Identifier:
keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7c:2f:38:1e:b6:bc:b7:9e:28:b4:70:2c:07:55:7e:60:97:
98:2c:40:9b:ca:33:28:b1:a2:f2:cc:08:6c:e5:58:aa:5d:e1:
d0:38:44:c3:70:f1:f3:01:8f:fe:07:23:5b:32:7f:68:e4:85:
d1:19:55:86:07:07:49:a9:ee:9b:a4:d7:cb:38:bb:b4:f5:37:
c1:57:d5:0d:72:d6:f5:76:c1:87:6b:f3:e9:2d:ad:7a:02:70:
33:96:3a:84:f3:12:08:2c:18:3e:c4:c4:e0:ee:ec:94:51:84:
1a:8e:d5:26:ea:f9:8d:01:37:97:fc:4f:22:bc:30:2d:e4:6c:
a3:ea:42:da:d5:22:c5:28:e4:12:a4:b3:2e:e3:c1:78:32:81:
22:d5:70:c0:4c:4e:34:9e:b6:35:dc:9c:0c:64:4c:be:94:50:
03:98:f0:ef:7e:99:11:ce:27:61:d8:66:88:7b:fa:1c:ed:32:
f8:19:38:3c:e8:37:2a:55:58:69:ea:c5:c7:80:2a:1f:50:03:
61:93:6d:84:16:b7:90:d2:94:f8:05:02:29:b0:5e:66:8f:0a:
f0:9e:78:0a:d1:e6:4b:ed:2a:19:62:5e:82:4b:c6:a7:b4:99:
9a:14:0d:0e:5a:4e:1a:10:97:e4:60:bc:ef:3c:86:6b:6c:e4:
8f:67:aa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:15 2026 by rpki-client